[Pdns-users] Protobuf - Telegraf

[Djerk Geurts]

> On 1 Oct 2022, at 07:28, Otto Moerbeek <otto at drijf.net> wrote:
> 
> The protobuf streams add a framing header of two bytes of length per protobuf message.
> The receiving side has to take that into account.

I have no idea if it does as the Telegraf xpack_protobuf input doesn’t have that many options to configure things. Processing after the input has been accepted, sure. But I’m not aware of a way to strip header bytes at the input.

> The dnstap streams use the framestream format. In the recursor, they
> are only implented to report on outgoing queries and their replies though,.

Pdns-recursor here and only interested in logQueries, which is configurable like so:

-- RPZ query logging
protobufServer("127.0.0.1:8000", {
  taggedOnly=true,
  logQueries=true,
  logResponses=false,
  exportTypes={'A', 'AAAA', 'CNAME', 'MX', 'NS', 'PTR', 'SPF', 'SRV', 'TXT'}
})

-- Djerk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20221001/49f61ecf/attachment.htm>